SAFEHEXER
Magíster de código seguro
Perfil profesional
Transforma software frágil en aplicaciones endurecidas. Experto en código seguro y refactorización segura.
Competencias clave
Código seguro; refactorización avanzada; DevSecOps; hardening de aplicaciones; mitigación OWASP
Logros principales
Reconstruyó el núcleo de una aplicación bancaria, reduciendo en un 98% los riesgos del OWASP Top 10.
Artículos de SAFEHEXER
ISO 27001 in 2026: The Quiet Guide That Signals a Harder Compliance Year
An updated step-by-step roadmap for ISO 27001 points to a familiar pressure in security teams: turning a standard into evidence, routines, and reviewable control.
When Data Isn’t Really Anonymous: Europe Draws a Harder Line
Anonymization is being treated less like a label and more like a technical proof, with re-identification risk judged case by case.
Cyber-Biodiritto and the AI Test for Human Dignity
The debate around disability, inclusion, and artificial intelligence is shifting from abstract ethics to a concrete question: how do we build AI that expands access without turning vulnerability into a new control surface?
Paper Policies, Real Practices: The Hidden Security Gap
A decision from Udine highlights a familiar organizational flaw: written rules can exist, yet day-to-day conduct may follow a different logic, with clear consequences for privacy, cybersecurity, and governance.
Italy Tightens the Lens on Facial Recognition as the AI Act Lands
A revised national decree is putting biometric identification under sharper legal control, with the hardest questions centered on when facial recognition is targeted, when it becomes too broad, and who can authorize it.
America’s Online Casino Map Is Still Drawn State by State
Real-money iGaming in the United States remains unevenly regulated in 2026, and that patchwork is shaping how digital gambling platforms handle trust, compliance, and jurisdiction.
The AI Privacy Trap Hidden in Plain Sight
In the article's framing, data minimization is no longer just about what enters an AI system, but also what the model learns, retains, and may later make inferable.
Europe's AI Transparency Deadline Turns Provenance Into a Security Problem
As Article 50 of the EU AI Act moves toward application in August 2026, major AI vendors are converging on disclosure, watermarking, and provenance metadata - but each layer has its own failure mode.
France’s Under-15 Social Media Block Hits a Legal Wall - and Exposes the Age-Verification Trap
A rejected ban on social media access for minors under 15 has turned into a broader test of whether child protection online can be enforced without turning age checks into a privacy risk.
Europe Turns the Cloud Into a Sovereignty Test
Brussels is treating cloud infrastructure, contract terms, and migration rights as part of digital defense, not just IT procurement.
When AI Pretends to Care, Privacy Becomes the Real Target
Companion chatbots are moving from novelty to regulated infrastructure, because once a machine is trusted like a friend, its data appetite and safety failures matter fast.
When AI Meets Accessibility, Compliance Gets Faster - and Riskier
Automation can speed up accessibility audits and remediation, but without human review and model governance, it can also create new defects, blind spots, and accountability gaps.
When GDPR Language Turns Into a Legal Trapdoor
The same word can point either to a forward-looking duty or to a backward-looking burden, and in privacy work that distinction shapes how accountability is understood.
When Face Recognition Becomes a Police Power, the Real Risk Is Mission Creep
Italy’s opening to real-time biometric identification under the EU AI Act is less a camera story than a control story: who can use live face matching, when, and how tightly it stays boxed in.
The Paper Trail of Moderation: How the DSA Makes Platform Power Visible
The Digital Services Act pushes online enforcement decisions into the open, forcing platforms to explain why content is removed, deprioritized, or an account is suspended.
When a VPN Sells Trust, the Real Product Is Verifiability
Proton VPN’s transparency pitch puts open-source code, public audits, and jurisdiction in the same frame, but those controls answer different questions and leave different blind spots.
Inside the Clinic’s New Trust Problem: When AI Use Becomes Information That Patients May Need
Healthcare AI is no longer just a technical layer - it is part of the consent question, the privacy perimeter, and the clinical trust model.
Why SBOMs Are Turning Into the New Front Line of Software Risk
A new ENISA-focused discussion puts the Software Bill of Materials in a different light: not as paperwork, but as a control that can shape supply-chain visibility, governance, and regulatory readiness.
When Compliance Meets the Firewall, Policy Becomes a Live Test
NIS2 and DORA are pushing organizations toward proof, not promises, and NSPM sits in the gap between what security teams intend and what their networks actually enforce.
The AI Memory Trap: Why Deleting Data Is Not the Same as Making Models Forget
When personal data has already shaped an AI system, erasing the record is only the first step - the harder problem is removing its influence from the model itself.